Prosím o kontrolu logu

dehydrovaný kocůr

Dobrý den.
Disk jsem defragmentoval. Provedl kontrolu avastem a adwarem, odstranil problémy. Vyčistil registry Ccleanerem, ale pořád to není ono :-(

Prosím tedy kontrolu logu:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:43:26, on 22.7.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\ISUSPM.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = About:Blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/hypersnap/{BD1E5E6E-C029-4451-8ABA-FE0B2B6E03EB}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60341
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: (no name) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: (no name) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - (no file)
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Documents and Settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\RunOnce: [GoogleChrome] C:\Program Files\Lavasoft\Ad-Aware\LavasoftGCHelper.exe LaunchChrome
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... ader55.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0AC323B3-BDFC-4926-AE73-D2A049FDB4BF}: NameServer = 172.23.76.1,172.23.76.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{86B63DB5-F0D8-4703-940D-73F04DCCFCAC}: NameServer = 172.23.76.1,172.23.76.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{0AC323B3-BDFC-4926-AE73-D2A049FDB4BF}: NameServer = 172.23.76.1,172.23.76.254
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 7518 bytes

Reklama

Příspěvekod **jaro3** » 22 črc 2010 09:53

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = About:Blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/hypersnap/{BD1E5E6E-C029-4451-8ABA-FE0B2B6E03EB}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60341
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: (no name) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - (no file)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... ader55.cab

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

dehydrovaný kocůr

Děkuji za rady, udělal jsem vše, jak si mi poradil. Tady je ten log:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4338

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

22.7.2010 16:59:04
mbam-log-2010-07-22 (16-59-04).txt

Typ skenu: Rychlý sken
Skenované objekty: 125012
Uplynulý čas: 11 minuta(y), 4 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 2
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\MADOWN (Worm.Magania) -> No action taken.

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

bledulka · Příspěvekod **bledulka** » 22 črc 2010 21:51

Takže v mbamu vše smaž.

Stáhni na plochu ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe
- Před použitím vypni všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary
-Zavři všechna aktivní okna a spusť ho pod učtem s právy administrátora
- Po spuštění se zobrazí podmínky použití, potvrď je stiskem tlačítka Ano

- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna

- Po dokončení skenování, se vytvoří log C:\ComboFix.txt, zkopíruj celý jeho obsah sem.

dehydrovaný kocůr

díky za radu :) log z combofix je zde:

ComboFix 10-07-22.01 - moskva 23.07.2010 9:29.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.247.99 [GMT 2:00]
Spuštěný z: c:\documents and settings\moskva\Dokumenty\Stažené soubory\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Lavasoft Ad-Watch Live! Anti-Virus *On-access scanning disabled* (Updated) {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\regedit.com
c:\windows\system32\AVSredirect.dll
c:\windows\system32\taskmgr.com

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-06-23 do 2010-07-23 )))))))))))))))))))))))))))))))
.

2010-07-22 15:47 . 2008-10-31 05:09 270888 ----a-r- c:\windows\system32\drivers\SbFw.sys
2010-07-22 15:47 . 2008-06-21 02:54 65576 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2010-07-22 15:47 . 2010-07-22 15:47 -------- d-----w- c:\program files\Sunbelt Software
2010-07-22 14:44 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-22 14:43 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-07-22 14:43 . 2010-07-22 14:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-22 06:41 . 2010-07-22 06:41 -------- d-----w- c:\program files\Trend Micro
2010-07-21 11:19 . 2010-07-06 17:28 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-07-21 10:10 . 2010-07-21 10:10 -------- d-----w- c:\documents and settings\LocalService\Plocha
2010-07-21 09:36 . 2010-07-06 17:28 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-07-21 09:35 . 2010-07-21 09:35 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-07-21 08:34 . 2010-07-21 08:40 -------- d-----w- c:\program files\Google
2010-07-21 08:33 . 2010-07-21 08:33 -------- d-----w- c:\program files\Lavasoft
2010-07-21 06:05 . 2010-07-21 06:05 -------- d---a-w- c:\windows\VDLL.DLL
2010-07-21 06:05 . 2010-07-21 06:05 -------- d---a-w- c:\windows\system32\runouce.exe
2010-07-21 06:05 . 2010-07-21 06:05 -------- d---a-w- c:\windows\RUNDL132.EXE
2010-07-21 06:05 . 2010-07-21 06:05 -------- d---a-w- c:\windows\logo_1.exe
2010-07-21 05:52 . 2010-07-21 05:52 632064 ----a-w- c:\windows\system32\msvcr80.dll
2010-07-21 05:52 . 2010-07-21 05:52 554240 ----a-w- c:\windows\system32\msvcp80.dll
2010-07-21 05:52 . 2010-07-21 05:52 34048 ----a-w- c:\windows\system32\eEmpty.exe
2010-07-21 05:52 . 2008-04-14 03:22 137216 ----a-w- c:\windows\system32\T.COM
2010-07-21 05:52 . 2008-04-14 03:22 147968 ----a-w- c:\windows\R.COM
2010-07-21 05:52 . 2010-07-21 05:52 -------- d-----w- c:\program files\Common Files\MicroWorld
2010-07-20 19:10 . 2010-07-20 19:10 -------- d-----w- c:\program files\CCleaner
2010-07-14 15:39 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2010-07-04 09:05 . 2010-06-28 20:57 38848 ----a-w- c:\windows\avastSS.scr
2010-06-25 13:32 . 2010-06-25 13:32 -------- d-----w- c:\program files\Application Updater
2010-06-23 19:28 . 2010-06-23 19:28 -------- d-----w- c:\windows\system32\XPSViewer
2010-06-23 19:28 . 2010-06-23 19:28 -------- d-----w- c:\program files\MSBuild
2010-06-23 19:27 . 2010-06-23 19:27 -------- d-----w- c:\program files\Reference Assemblies
2010-06-23 19:27 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-06-23 19:26 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-06-23 19:26 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2010-06-23 19:26 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2010-06-23 19:26 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2010-06-23 19:26 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2010-06-23 19:26 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2010-06-23 19:26 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-06-23 19:26 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2010-06-23 18:31 . 2009-09-04 15:29 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2010-06-23 18:31 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2010-06-23 18:31 . 2008-10-15 04:22 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
2010-06-23 18:31 . 2007-07-19 16:14 3727720 ----a-w- c:\windows\system32\d3dx9_35.dll
2010-06-23 18:31 . 2007-05-16 14:45 3497832 ----a-w- c:\windows\system32\d3dx9_34.dll
2010-06-23 18:30 . 2010-06-23 18:30 -------- d-----w- c:\windows\Logs

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-20 08:52 . 2010-05-19 11:02 -------- d-----w- c:\program files\Gabest
2010-07-20 08:52 . 2009-09-17 07:23 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-07-20 08:49 . 2010-06-15 08:47 -------- d-----w- c:\program files\ScreenshotCaptor
2010-06-29 04:54 . 2001-10-25 14:00 78228 ----a-w- c:\windows\system32\perfc005.dat
2010-06-29 04:54 . 2001-10-25 14:00 429256 ----a-w- c:\windows\system32\perfh005.dat
2010-06-28 20:57 . 2010-04-20 18:36 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-06-28 20:37 . 2010-04-20 18:36 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-06-28 20:37 . 2010-04-20 18:36 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-06-28 20:33 . 2010-04-20 18:36 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-06-28 20:32 . 2010-04-20 18:36 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-06-28 20:32 . 2010-04-20 18:36 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-06-28 20:32 . 2010-04-20 18:36 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-28 20:32 . 2010-04-20 18:36 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-06-20 17:00 . 2010-06-20 16:58 -------- d-----w- c:\program files\QuickTime
2010-06-20 16:57 . 2010-06-20 16:57 -------- d-----w- c:\program files\Common Files\Apple
2010-06-20 16:56 . 2010-06-20 16:56 -------- d-----w- c:\program files\Apple Software Update
2010-06-20 16:28 . 2010-06-20 16:26 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-06-20 16:14 . 2010-06-20 14:29 -------- d-----w- c:\program files\Common Files\ArcSoft
2010-06-20 13:49 . 2010-02-09 10:09 -------- d-----w- c:\program files\Makro
2010-06-20 13:45 . 2010-05-19 11:02 -------- d-----w- c:\program files\AviSynth 2.5
2010-06-15 08:48 . 2009-11-07 15:54 58 ----a-w- c:\windows\system32\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2010-06-14 14:31 . 2009-08-30 17:29 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-02 08:00 . 2010-06-20 16:26 108032 ----a-w- c:\windows\system32\ff_vfw.dll
2010-05-06 10:35 . 2004-08-17 13:49 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-02 08:09 . 2004-08-17 13:44 1851264 ----a-w- c:\windows\system32\win32k.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\documents and settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2007-07-12 226904]
"ICQ"="c:\program files\ICQ6.5\ICQ.exe" [2009-11-16 172792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2007-06-19 101144]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2007-06-19 84760]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2007-06-19 125720]
"AGRSMMSG"="AGRSMMSG.exe" [2005-11-16 88209]
"hpWirelessAssistant"="c:\program files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2005-12-13 507904]
"Cpqset"="c:\program files\HPQ\Default Settings\cpqset.exe" [2004-09-07 213054]
"SoundMAXPnP"="c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 1388544]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-10-25 652624]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-09-13 1603152]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-06-28 2837864]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-03-17 421888]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0lsdelete

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [21.7.2010 11:36 64288]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [20.4.2010 20:36 165456]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [22.7.2010 17:47 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [8.1.2010 0:51 380928]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [20.4.2010 20:36 17744]
R2 SbPF.Launcher;SbPF.Launcher;c:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [6.7.2010 19:28 1352832]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [22.7.2010 17:47 65576]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [21.7.2010 10:35 135664]
.
Obsah adresáře 'Naplánované úlohy'

2010-07-23 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-07-06 17:28]

2010-07-01 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2010-07-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-21 08:34]

2010-07-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-21 08:34]
.
.
------- Doplňkový sken -------
.
TCP: {0AC323B3-BDFC-4926-AE73-D2A049FDB4BF} = 172.23.76.1,172.23.76.254
TCP: {86B63DB5-F0D8-4703-940D-73F04DCCFCAC} = 172.23.76.1,172.23.76.254
FF - ProfilePath - c:\documents and settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - MyAshampoo Customized Web Search
FF - prefs.js: browser.startup.homepage - www.google.com
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.as ... 2475029&q=
FF - component: c:\documents and settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll
FF - component: c:\documents and settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\extensions\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\extensions\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}\components\RadioWMPCore.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

BHO-{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-23 09:41
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Cpqset = c:\program files\HPQ\Default Settings\cpqset.exe????????3?8?9?1??????? ???B???????????????B? ??????

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
Celkový čas: 2010-07-23 09:46:50
ComboFix-quarantined-files.txt 2010-07-23 07:46

Před spuštěním: Volných bajtů: 54 165 700 608
Po spuštění: Volných bajtů: 54 609 522 688

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 016475BC22C2C9E639A620843634E2CC

Příspěvekod **jaro3** » 23 črc 2010 10:29

možná bys měl vypnout rez. ochranu buď u Avast5 (jen u antispywaru!!) ale spíš bych doporučoval vypnout rez. kontrolu trvale u Lavasoft Ad-Watch Live! Anti-Virus
http://www.lavasoftsupport.com/index.ph ... opic=19804

Protože je možný konflikt mezi antispyware u Avast5 a AD-Aware (Ad-Watch).

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

File::
c:\windows\VDLL.DLL
c:\windows\system32\perfc005.dat
c:\windows\system32\perfh005.dat

Folder::
c:\windows\system32\runouce.exe

Firefox::
FF - ProfilePath - c:\documents and settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - MyAshampoo Customized Web Search
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.as ... 2475029&q=
FF - component: c:\documents and settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Znáš tyto adresy:
172.23.76.1,172.23.76.254 ??

dehydrovaný kocůr

Ty adresy jsem musel zadat do nastavení prohlížeče, aby mi fungoval internet - laicky řečeno. Tzn., že je znám. :)

Rezidentní ochranu u Ad-Aware jsem tedy vypnul. :)

Výpis z ComboFix:
ComboFix 10-07-22.01 - moskva 23.07.2010 11:26:30.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.247.90 [GMT 2:00]
Spuštěný z: c:\documents and settings\moskva\Dokumenty\Stažené soubory\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\moskva\Dokumenty\Stažené soubory\CFscript.txt
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Lavasoft Ad-Watch Live! Anti-Virus *On-access scanning disabled* (Updated) {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}

FILE ::
"c:\windows\system32\perfc005.dat"
"c:\windows\system32\perfh005.dat"
"c:\windows\VDLL.DLL"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll
c:\windows\system32\perfc005.dat
c:\windows\system32\perfh005.dat
c:\windows\system32\runouce.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-06-23 do 2010-07-23 )))))))))))))))))))))))))))))))
.

2010-07-22 15:47 . 2008-10-31 05:09 270888 ----a-r- c:\windows\system32\drivers\SbFw.sys
2010-07-22 15:47 . 2008-06-21 02:54 65576 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2010-07-22 15:47 . 2010-07-22 15:47 -------- d-----w- c:\program files\Sunbelt Software
2010-07-22 14:44 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-22 14:43 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-07-22 14:43 . 2010-07-22 14:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-22 06:41 . 2010-07-22 06:41 -------- d-----w- c:\program files\Trend Micro
2010-07-21 11:19 . 2010-07-06 17:28 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-07-21 10:10 . 2010-07-21 10:10 -------- d-----w- c:\documents and settings\LocalService\Plocha
2010-07-21 09:36 . 2010-07-06 17:28 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-07-21 09:35 . 2010-07-21 09:35 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-07-21 08:34 . 2010-07-21 08:40 -------- d-----w- c:\program files\Google
2010-07-21 08:33 . 2010-07-21 08:33 -------- d-----w- c:\program files\Lavasoft
2010-07-21 06:05 . 2010-07-21 06:05 -------- d---a-w- c:\windows\VDLL.DLL
2010-07-21 06:05 . 2010-07-21 06:05 -------- d---a-w- c:\windows\RUNDL132.EXE
2010-07-21 06:05 . 2010-07-21 06:05 -------- d---a-w- c:\windows\logo_1.exe
2010-07-21 05:52 . 2010-07-21 05:52 632064 ----a-w- c:\windows\system32\msvcr80.dll
2010-07-21 05:52 . 2010-07-21 05:52 554240 ----a-w- c:\windows\system32\msvcp80.dll
2010-07-21 05:52 . 2010-07-21 05:52 34048 ----a-w- c:\windows\system32\eEmpty.exe
2010-07-21 05:52 . 2008-04-14 03:22 137216 ----a-w- c:\windows\system32\T.COM
2010-07-21 05:52 . 2008-04-14 03:22 147968 ----a-w- c:\windows\R.COM
2010-07-21 05:52 . 2010-07-21 05:52 -------- d-----w- c:\program files\Common Files\MicroWorld
2010-07-20 19:10 . 2010-07-20 19:10 -------- d-----w- c:\program files\CCleaner
2010-07-14 15:39 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2010-07-04 09:05 . 2010-06-28 20:57 38848 ----a-w- c:\windows\avastSS.scr
2010-06-25 13:32 . 2010-06-25 13:32 -------- d-----w- c:\program files\Application Updater
2010-06-23 19:28 . 2010-06-23 19:28 -------- d-----w- c:\windows\system32\XPSViewer
2010-06-23 19:28 . 2010-06-23 19:28 -------- d-----w- c:\program files\MSBuild
2010-06-23 19:27 . 2010-06-23 19:27 -------- d-----w- c:\program files\Reference Assemblies
2010-06-23 19:27 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-06-23 19:26 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-06-23 19:26 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2010-06-23 19:26 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2010-06-23 19:26 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2010-06-23 19:26 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2010-06-23 19:26 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2010-06-23 19:26 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-06-23 19:26 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2010-06-23 18:31 . 2009-09-04 15:29 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2010-06-23 18:31 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2010-06-23 18:31 . 2008-10-15 04:22 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
2010-06-23 18:31 . 2007-07-19 16:14 3727720 ----a-w- c:\windows\system32\d3dx9_35.dll
2010-06-23 18:31 . 2007-05-16 14:45 3497832 ----a-w- c:\windows\system32\d3dx9_34.dll
2010-06-23 18:30 . 2010-06-23 18:30 -------- d-----w- c:\windows\Logs

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-20 08:52 . 2010-05-19 11:02 -------- d-----w- c:\program files\Gabest
2010-07-20 08:52 . 2009-09-17 07:23 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-07-20 08:49 . 2010-06-15 08:47 -------- d-----w- c:\program files\ScreenshotCaptor
2010-06-28 20:57 . 2010-04-20 18:36 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-06-28 20:37 . 2010-04-20 18:36 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-06-28 20:37 . 2010-04-20 18:36 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-06-28 20:33 . 2010-04-20 18:36 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-06-28 20:32 . 2010-04-20 18:36 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-06-28 20:32 . 2010-04-20 18:36 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-06-28 20:32 . 2010-04-20 18:36 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-28 20:32 . 2010-04-20 18:36 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-06-20 17:00 . 2010-06-20 16:58 -------- d-----w- c:\program files\QuickTime
2010-06-20 16:57 . 2010-06-20 16:57 -------- d-----w- c:\program files\Common Files\Apple
2010-06-20 16:56 . 2010-06-20 16:56 -------- d-----w- c:\program files\Apple Software Update
2010-06-20 16:28 . 2010-06-20 16:26 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-06-20 16:14 . 2010-06-20 14:29 -------- d-----w- c:\program files\Common Files\ArcSoft
2010-06-20 13:49 . 2010-02-09 10:09 -------- d-----w- c:\program files\Makro
2010-06-20 13:45 . 2010-05-19 11:02 -------- d-----w- c:\program files\AviSynth 2.5
2010-06-15 08:48 . 2009-11-07 15:54 58 ----a-w- c:\windows\system32\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2010-06-14 14:31 . 2009-08-30 17:29 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-02 08:00 . 2010-06-20 16:26 108032 ----a-w- c:\windows\system32\ff_vfw.dll
2010-05-06 10:35 . 2004-08-17 13:49 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-02 08:09 . 2004-08-17 13:44 1851264 ----a-w- c:\windows\system32\win32k.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\documents and settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2007-07-12 226904]
"ICQ"="c:\program files\ICQ6.5\ICQ.exe" [2009-11-16 172792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2007-06-19 101144]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2007-06-19 84760]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2007-06-19 125720]
"AGRSMMSG"="AGRSMMSG.exe" [2005-11-16 88209]
"hpWirelessAssistant"="c:\program files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2005-12-13 507904]
"Cpqset"="c:\program files\HPQ\Default Settings\cpqset.exe" [2004-09-07 213054]
"SoundMAXPnP"="c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 1388544]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-10-25 652624]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-09-13 1603152]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-06-28 2837864]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-03-17 421888]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0lsdelete

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [21.7.2010 11:36 64288]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [20.4.2010 20:36 165456]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [22.7.2010 17:47 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [8.1.2010 0:51 380928]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [20.4.2010 20:36 17744]
R2 SbPF.Launcher;SbPF.Launcher;c:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [6.7.2010 19:28 1352832]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [22.7.2010 17:47 65576]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [21.7.2010 10:35 135664]
.
Obsah adresáře 'Naplánované úlohy'

2010-07-23 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-07-06 17:28]

2010-07-01 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2010-07-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-21 08:34]

2010-07-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-21 08:34]
.
.
------- Doplňkový sken -------
.
TCP: {0AC323B3-BDFC-4926-AE73-D2A049FDB4BF} = 172.23.76.1,172.23.76.254
TCP: {86B63DB5-F0D8-4703-940D-73F04DCCFCAC} = 172.23.76.1,172.23.76.254
FF - ProfilePath - c:\documents and settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\
FF - prefs.js: browser.startup.homepage - www.google.com
FF - component: c:\documents and settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\extensions\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\extensions\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}\components\RadioWMPCore.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-23 11:38
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Cpqset = c:\program files\HPQ\Default Settings\cpqset.exe????????3?8?9?1??????? ???B???????????????B? ??????

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
Celkový čas: 2010-07-23 11:42:46
ComboFix-quarantined-files.txt 2010-07-23 09:42
ComboFix2.txt 2010-07-23 07:46

Před spuštěním: Volných bajtů: 54 586 810 368
Po spuštění: Volných bajtů: 54 582 370 304

- - End Of File - - E599B85BBBE7BA5F75DAE186164F0416

HijackThis:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:52:56, on 23.7.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Documents and Settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\ISUSPM.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ISUSPM] "C:\Documents and Settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{0AC323B3-BDFC-4926-AE73-D2A049FDB4BF}: NameServer = 172.23.76.1,172.23.76.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{86B63DB5-F0D8-4703-940D-73F04DCCFCAC}: NameServer = 172.23.76.1,172.23.76.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{0AC323B3-BDFC-4926-AE73-D2A049FDB4BF}: NameServer = 172.23.76.1,172.23.76.254
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe

--
End of file - 5917 bytes

Příspěvekod **jaro3** » 23 črc 2010 12:05

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

vyčisti systém CCleanerem

a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš

pozn. před stažením T-Cleaneru a po dobu čištění deaktivuj AVG či Avast, následně T-Cleaner smaž a zapni si AVG či Avast.

Stáhni si program OTM (by OldTimer)
a ulož si ho na disk C a spusť ho.
- Do levého sloupce (Paste Instructions for Items to be Moved) zkopíruj tyto cesty:
Poznámka: Nepoužij k označení funkci VYBRAT VŠE

Kód: Vybrat vše

:Processes
explorer.exe

:Services

:Reg

:Files
C:\WINDOWS\System32\*.tmp 
C:\WINDOWS\*.tmp 
C:\WINDOWS\system32\*.tmp.dll 
C:\WINDOWS\system32\SET*.tmp 
c:\windows\Tasks\*.job 
C:\*.tmp
c:\windows\VDLL.DLL

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

- Po zkopírování klikni na tlačítko MoveIt! a vlož sem následně celý obsah z pravého sloupce, jinak uložený ve složce C:\_OTMoveIt\MovedFiles\, který bude informovat o výsledcích
- Je možné, že pokud nebudou moci být soubory odstraněny, budeš dotázán na restart počítače, v tom případě restart potvrď.

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60341
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

Pak napiš , jak je to s rychlostí PC atd.

dehydrovaný kocůr

Log z OTM:

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
C:\WINDOWS\System32\BSETUP.TMP moved successfully.
C:\WINDOWS\System32\CONFIG.TMP moved successfully.
C:\WINDOWS\System32\SET4EF.tmp moved successfully.
C:\WINDOWS\002663_.tmp moved successfully.
C:\WINDOWS\msdownld.tmp folder moved successfully.
C:\WINDOWS\SET3.tmp moved successfully.
C:\WINDOWS\SET4.tmp moved successfully.
C:\WINDOWS\SET8.tmp moved successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
c:\windows\Tasks\Ad-Aware Update (Weekly).job moved successfully.
c:\windows\Tasks\AppleSoftwareUpdate.job moved successfully.
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
File/Folder C:\*.tmp not found.
File/Folder c:\windows\VDLL.DLL not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 65748 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: moskva
->Temp folder emptied: 782160 bytes
->Temporary Internet Files folder emptied: 1753490 bytes
->FireFox cache emptied: 39920432 bytes
->Flash cache emptied: 1966424 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 210944 bytes

Total Files Cleaned = 43,00 mb

OTM by OldTimer - Version 3.1.15.0 log created on 07232010_200708

Files moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot.
Registry entries deleted on Reboot...

Jdu fixnout ty řádky, ale musím říct, že už nyní je práce na počítači znatelně rychlejší :) Zdá se mi, že i pohyb myškou na obrazovce je jaksi "živější". :)

Příspěvekod **jaro3** » 23 črc 2010 20:41

Fajn, ještě něco zkusíme.

Stáhni si OTH
na svojí plochu( pokud používáš Firefox , pravým klikni na OTH link a vyber uložit jako (Save as..).

Stáhni si OTL
na svojí plochu (pokud používáš Firefox , pravým klikni na OTL link a vyber uložit jako (Save as..).

Stáhni si soubor Scan.txt
na svojí plochu (pokud používáš Firefox , pravým klikni na OTL link a vyber uložit jako (Save as..).

Poklepej na soubor OTH na ploše , po spuštění programu klikni na Kill All Processes.Poté klikni na Start OTL .Poklepej Do prázdného okna pod Vlastní skenování /opravy ( Custom Scans box). Objeví se zpráva: Kliknutím na OK vyberete cestu k souboru, kliknutím na Zrušit zrušíte výběr.
Klikni na OK. Objeví se okno průzkumníku , zde klikneš na plochu a najdeš na ní soubor Scan.txt .Klikni na Otevřít.
Poté klikni na Rychle prohledat (Quick Scan). Neměň žádná jiná nastavení . Sken může trvat dlouho.
Kdy sken skončí , objeví se na ploše dva logy:
OTL.Txt a Extras.Txt , jsou uloženy ve stejném místě jako OTL.
Zkopíruj sem prosím celý obsah obou logů.

dehydrovaný kocůr

Napoprvé jsem nedodržel přesně postup, jelikož jsem nepočítal, že když kliknu "Kill All Processes" vypne mi to prohlížeč :) Výsledkem byly ty dva logy OTL.txt a Extras.txt, jelikož jsem ale nepoužil scriptík ze souboru scan.txt, oba jsem je smazal a provedl vše ještě jednou přesně podle tvého návodu. Nyní mi ale po scanu zůstal na ploše jen jeden log a to OTL.txt, musím jej tady vložil na dvakrát, protože je dost dlouhý...

OTL logfile created on: 23.7.2010 21:44:23 - Run 2
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and Settings\moskva\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

247,00 Mb Total Physical Memory | 107,00 Mb Available Physical Memory | 43,00% Memory free
604,00 Mb Paging File | 442,00 Mb Available in Paging File | 73,00% Paging File free
Paging file location(s): C:\pagefile.sys 372 744 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 57,38 Gb Free Space | 77,00% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MOSLERI
Current User Name: moskva
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010.07.23 21:27:22 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\moskva\Plocha\OTL.exe
PRC - [2010.07.23 21:27:05 | 000,258,560 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\moskva\Plocha\OTH.scr
PRC - [2010.06.28 22:57:18 | 002,837,864 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010.06.28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2008.10.31 07:24:28 | 001,365,288 | ---- | M] (Sunbelt Software, Inc.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe

========== Modules (SafeList) ==========

MOD - [2010.07.23 21:27:22 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\moskva\Plocha\OTL.exe
MOD - [2010.04.04 01:45:33 | 000,378,264 | ---- | M] (Adobe Systems, Inc.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.dll
MOD - [2009.07.12 02:12:06 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
MOD - [2008.04.14 05:19:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2008.04.13 20:36:04 | 002,927,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\xpsp2res.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - [2010.07.06 19:28:44 | 001,352,832 | ---- | M] (Lavasoft) [On_Demand | Stopped] -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
SRV - [2010.06.28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010.06.28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010.06.28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010.01.08 00:51:02 | 000,380,928 | ---- | M] (Spigot, Inc.) [Auto | Stopped] -- C:\Program Files\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2008.10.31 07:24:28 | 001,365,288 | ---- | M] (Sunbelt Software, Inc.) [Auto | Running] -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe -- (SPF4)
SRV - [2008.10.31 07:24:28 | 000,095,528 | ---- | M] (Sunbelt Software, Inc.) [Auto | Stopped] -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe -- (SbPF.Launcher)
SRV - [2008.07.29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2002.09.20 14:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Stopped] -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default))

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys -- (hwdatacard)
DRV - [2010.07.06 19:28:45 | 000,064,288 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd)
DRV - [2010.06.28 22:37:52 | 000,046,672 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010.06.28 22:37:30 | 000,165,456 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2010.06.28 22:33:13 | 000,023,376 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010.06.28 22:32:45 | 000,100,176 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2010.06.28 22:32:33 | 000,017,744 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010.06.28 22:32:16 | 000,028,880 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2008.10.31 07:09:06 | 000,270,888 | R--- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\SbFw.sys -- (SbFw)
DRV - [2008.06.21 04:54:54 | 000,066,600 | R--- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\sbhips.sys -- (sbhips)
DRV - [2008.06.21 04:54:54 | 000,065,576 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SbFwIm.sys -- (SBFWIMCL)
DRV - [2006.11.10 15:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2005.11.16 14:12:46 | 001,066,278 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2005.02.09 11:59:00 | 000,014,165 | ---- | M] (Pinnacle Systems GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Pclepci.sys -- (PCLEPCI)
DRV - [2004.05.26 15:18:18 | 000,044,928 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Crawler Search"
FF - prefs.js..browser.search.defaultthis.engineName: "MyAshampoo Customized Web Search"
FF - prefs.js..browser.search.order.1: "Crawler Search"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=661003"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.google.com"
FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.11.2
FF - prefs.js..extensions.enabledItems: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4}:2.5.6.0
FF - prefs.js..extensions.enabledItems: {75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.6

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.07.23 19:33:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.07.23 19:33:50 | 000,000,000 | ---D | M]

[2009.09.29 08:35:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\moskva\Data aplikací\Mozilla\Extensions
[2010.07.22 21:27:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\extensions
[2009.10.10 20:52:47 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010.07.02 14:27:54 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.05.17 13:14:23 | 000,000,000 | ---D | M] (HyperSnap Toolbar) -- C:\Documents and Settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
[2010.05.17 12:39:59 | 000,000,000 | ---D | M] (MyAshampoo Toolbar) -- C:\Documents and Settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\extensions\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}
[2010.01.20 12:19:10 | 000,000,923 | ---- | M] () -- C:\Documents and Settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\searchplugins\conduit.xml
[2009.10.10 20:53:09 | 000,001,201 | ---- | M] () -- C:\Documents and Settings\moskva\Data aplikací\Mozilla\Firefox\Profiles\7j4c233p.default\searchplugins\winamp-search.xml
[2010.07.21 21:05:00 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009.09.21 11:24:16 | 000,001,329 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml
[2010.03.19 21:48:31 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.03.19 21:48:31 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.03.19 21:48:31 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.03.19 21:48:31 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.03.19 21:48:31 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2010.07.23 11:37:47 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\Cpqset.exe ()
O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe (Analog Devices, Inc.)
O4 - HKCU..\Run: [ICQ] C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O4 - HKCU..\Run: [ISUSPM] C:\Documents and Settings\All Users\Data aplikací\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Macrovision Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.23.76.1 10.153.195.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\moskva\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\moskva\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 90 Days ==========

[2010.07.23 21:27:16 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\moskva\Plocha\OTL.exe
[2010.07.23 21:27:04 | 000,258,560 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\moskva\Plocha\OTH.scr
[2010.07.23 20:07:08 | 000,000,000 | ---D | C] -- C:\_OTM
[2010.07.23 19:47:18 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\moskva\Recent
[2010.07.23 12:07:38 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.07.23 09:25:51 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.07.22 17:47:55 | 000,270,888 | R--- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\SbFw.sys
[2010.07.22 17:47:55 | 000,065,576 | ---- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\SbFwIm.sys
[2010.07.22 17:47:02 | 000,000,000 | ---D | C] -- C:\Program Files\Sunbelt Software
[2010.07.22 16:45:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Data aplikací\Malwarebytes
[2010.07.22 16:43:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2010.07.22 16:43:52 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010.07.22 15:54:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Google
[2010.07.22 08:41:44 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010.07.21 11:36:16 | 000,064,288 | ---- | C] (Lavasoft AB) -- C:\WINDOWS\System32\drivers\Lbd.sys
[2010.07.21 11:35:39 | 000,095,024 | ---- | C] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys
[2010.07.21 11:16:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\Sunbelt Software
[2010.07.21 10:35:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\Temp
[2010.07.21 10:35:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Google
[2010.07.21 10:34:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\Google
[2010.07.21 10:34:55 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2010.07.21 10:34:33 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Data aplikací\{65893B95-F47B-4483-B883-86BA181E9B54}
[2010.07.21 10:33:19 | 000,000,000 | ---D | C] -- C:\Program Files\Lavasoft
[2010.07.21 10:33:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
[2010.07.20 21:10:08 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010.07.20 20:57:00 | 003,387,040 | ---- | C] (Piriform Ltd) -- C:\Documents and Settings\moskva\Plocha\ccsetup232.exe
[2010.07.15 21:46:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Plocha\tatka
[2010.07.04 11:05:56 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\WINDOWS\avastSS.scr
[2010.07.01 19:03:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Apple
[2010.06.25 16:33:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Data aplikací\Dealio
[2010.06.25 15:32:30 | 000,000,000 | ---D | C] -- C:\Program Files\Application Updater
[2010.06.25 10:14:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\PCHealth
[2010.06.24 16:25:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\WMTools Downloaded Files
[2010.06.23 21:28:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2010.06.23 21:28:01 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2010.06.23 21:27:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US
[2010.06.23 21:27:48 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2010.06.23 21:24:32 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2010.06.23 21:23:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2010.06.23 20:30:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2010.06.22 21:01:25 | 000,719,872 | ---- | C] (Abysmal Software) -- C:\WINDOWS\System32\devil.dll
[2010.06.22 21:01:25 | 000,369,152 | ---- | C] (The Public) -- C:\WINDOWS\System32\avisynth.dll
[2010.06.22 21:01:20 | 000,070,656 | ---- | C] (http://www.helixcommunity.org) -- C:\WINDOWS\System32\i420vfw.dll
[2010.06.22 21:00:36 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll
[2010.06.20 21:48:08 | 000,000,000 | -H-D | C] -- C:\WINDOWS\PIF
[2010.06.20 19:21:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Plocha\HD k převedení
[2010.06.20 19:10:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Data aplikací\Apple Computer
[2010.06.20 18:58:38 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010.06.20 18:58:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
[2010.06.20 18:57:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2010.06.20 18:57:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\Apple
[2010.06.20 18:56:52 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2010.06.20 18:56:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple
[2010.06.20 18:56:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\Apple Computer
[2010.06.20 18:29:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Data aplikací\Media Player Classic
[2010.06.20 18:26:35 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm
[2010.06.20 18:26:34 | 000,151,552 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm
[2010.06.20 18:26:34 | 000,070,656 | ---- | C] (http://www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll
[2010.06.20 18:26:20 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2010.06.20 16:34:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\ArcSoft
[2010.06.20 16:33:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Data aplikací\ArcSoft
[2010.06.20 16:33:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\ArcSoft
[2010.06.20 16:31:10 | 000,018,688 | ---- | C] (Arcsoft, Inc.) -- C:\WINDOWS\System32\drivers\afc.sys
[2010.06.20 16:29:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ArcSoft
[2010.06.15 10:47:45 | 000,000,000 | ---D | C] -- C:\Program Files\ScreenshotCaptor
[2010.05.19 19:26:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Data aplikací\Audacity
[2010.05.19 14:53:59 | 000,000,000 | ---D | C] -- C:\Program Files\Free Audio Editor
[2010.05.19 13:02:57 | 000,000,000 | ---D | C] -- C:\Program Files\Gabest
[2010.05.19 13:02:29 | 000,000,000 | ---D | C] -- C:\Program Files\AviSynth 2.5
[2010.05.19 11:54:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
[2010.05.17 13:59:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Data aplikací\FastStone
[2010.05.17 13:14:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Data aplikací\Toolbar4
[2010.05.17 13:14:07 | 000,000,000 | ---D | C] -- C:\Program Files\HyperSnap 6
[2010.05.17 12:40:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\Conduit
[2010.05.17 12:39:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\windows media
[2010.05.17 12:39:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages
[2010.05.17 12:38:44 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Components
[2010.05.17 12:25:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Data aplikací\Longfine Software
[2010.05.17 11:42:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\TechSmith
[2010.05.17 11:28:49 | 000,000,000 | ---D | C] -- C:\Program Files\Movies
[1 C:\Documents and Settings\moskva\Plocha\*.tmp files -> C:\Documents and Settings\moskva\Plocha\*.tmp -> ]

========== Files - Modified Within 90 Days ==========

[2010.07.23 21:37:39 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.07.23 21:37:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.07.23 21:37:27 | 259,444,736 | -HS- | M] () -- C:\hiberfil.sys
[2010.07.23 21:36:35 | 003,932,160 | -H-- | M] () -- C:\Documents and Settings\moskva\NTUSER.DAT
[2010.07.23 21:36:35 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\moskva\ntuser.ini
[2010.07.23 21:27:22 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\moskva\Plocha\OTL.exe
[2010.07.23 21:27:05 | 000,258,560 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\moskva\Plocha\OTH.scr
[2010.07.23 20:20:09 | 000,002,443 | ---- | M] () -- C:\Documents and Settings\moskva\Plocha\HiJackThis.lnk
[2010.07.23 19:48:40 | 000,019,852 | ---- | M] () -- C:\Documents and Settings\moskva\Dokumenty\cc_20100723_194832.reg
[2010.07.23 11:38:13 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.07.23 11:37:47 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010.07.23 09:26:01 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010.07.22 17:50:17 | 006,424,258 | -H-- | M] () -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\IconCache.db
[2010.07.22 15:25:19 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.07.21 11:35:39 | 000,095,024 | ---- | M] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys
[2010.07.21 10:34:29 | 000,000,867 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Ad-Aware.lnk
[2010.07.20 21:37:17 | 000,051,568 | ---- | M] () -- C:\Documents and Settings\moskva\Dokumenty\cc_20100720_213648.reg
[2010.07.20 21:10:13 | 000,001,548 | ---- | M] () -- C:\Documents and Settings\moskva\Plocha\CCleaner.lnk
[2010.07.20 20:57:01 | 003,387,040 | ---- | M] (Piriform Ltd) -- C:\Documents and Settings\moskva\Plocha\ccsetup232.exe
[2010.07.20 20:41:09 | 000,097,792 | ---- | M] () -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.07.20 10:37:32 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\moskva\Dokumenty\~$solvencni_rizeni_by_a94.doc
[2010.07.06 19:28:45 | 000,064,288 | ---- | M] (Lavasoft AB) -- C:\WINDOWS\System32\drivers\Lbd.sys
[2010.07.06 19:28:44 | 000,015,880 | ---- | M] () -- C:\WINDOWS\System32\lsdelete.exe
[2010.07.04 11:05:59 | 000,002,553 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.07.03 21:40:47 | 000,029,184 | ---- | M] () -- C:\Documents and Settings\moskva\Dokumenty\k nahrání.doc
[2010.06.29 06:54:59 | 000,979,624 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.06.29 06:54:59 | 000,432,690 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.06.29 06:54:59 | 000,067,646 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.06.28 22:57:33 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\WINDOWS\avastSS.scr
[2010.06.28 22:57:12 | 000,165,032 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010.06.28 22:37:52 | 000,046,672 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010.06.28 22:37:30 | 000,165,456 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010.06.28 22:33:13 | 000,023,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010.06.28 22:32:45 | 000,100,176 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010.06.28 22:32:42 | 000,094,544 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010.06.28 22:32:33 | 000,017,744 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010.06.28 22:32:16 | 000,028,880 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010.06.25 14:57:32 | 000,018,312 | ---- | M] () -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\GDIPFONTCACHEV1.DAT
[2010.06.24 08:22:49 | 000,118,952 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.06.20 20:07:26 | 000,139,776 | ---- | M] () -- C:\Documents and Settings\moskva\Dokumenty\Semestrální práce - Insolvenční řízení.doc
[2010.06.20 18:59:28 | 000,001,604 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\QuickTime Player.lnk
[2010.06.19 16:34:01 | 000,141,824 | ---- | M] () -- C:\Documents and Settings\moskva\Dokumenty\insolvencni_rizeni_by_a94.doc
[2010.06.15 10:55:29 | 000,007,084 | ---- | M] () -- C:\Documents and Settings\moskva\Dokumenty\logo vsp.JPG
[2010.06.15 10:48:24 | 000,000,058 | ---- | M] () -- C:\WINDOWS\System32\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2010.06.15 10:48:24 | 000,000,058 | ---- | M] () -- C:\Documents and Settings\moskva\Local Settings\Data aplikací\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2010.06.15 10:05:06 | 000,692,603 | ---- | M] () -- C:\Documents and Settings\moskva\Dokumenty\TQM_noPW.pdf
[2010.06.10 18:59:15 | 000,019,456 | ---- | M] () -- C:\Documents and Settings\moskva\Dokumenty\nemcina.doc
[2010.06.02 10:00:00 | 000,108,032 | ---- | M] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010.06.02 10:00:00 | 000,000,038 | ---- | M] () -- C:\WINDOWS\avisplitter.ini
[2010.05.19 12:28:22 | 000,001,050 | ---- | M] () -- C:\WINDOWS\VFO.INI
[2010.05.19 12:12:45 | 000,000,349 | ---- | M] () -- C:\WINDOWS\VFO.VST
[2010.05.19 12:00:06 | 000,000,349 | ---- | M] () -- C:\Documents and Settings\All Users\Dokumenty\PCLECHAL.INI
[1 C:\Documents and Settings\moskva\Plocha\*.tmp files -> C:\Documents and Settings\moskva\Plocha\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.07.23 19:48:35 | 000,019,852 | ---- | C] () -- C:\Documents and Settings\moskva\Dokumenty\cc_20100723_194832.reg
[2010.07.23 09:26:01 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010.07.23 09:25:53 | 000,261,312 | ---- | C] () -- C:\cmldr
[2010.07.22 08:41:54 | 000,002,443 | ---- | C] () -- C:\Documents and Settings\moskva\Plocha\HiJackThis.lnk
[2010.07.21 13:19:18 | 000,015,880 | ---- | C] () -- C:\WINDOWS\System32\lsdelete.exe
[2010.07.21 10:34:29 | 000,000,867 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Ad-Aware.lnk
[2010.07.21 07:52:36 | 000,000,522 | ---- | C] () -- C:\WINDOWS\System32\Microsoft.VC80.CRT.manifest
[2010.07.20 21:37:03 | 000,051,568 | ---- | C] () -- C:\Documents and Settings\moskva\Dokumenty\cc_20100720_213648.reg
[2010.07.20 21:10:13 | 000,001,548 | ---- | C] () -- C:\Documents and Settings\moskva\Plocha\CCleaner.lnk
[2010.07.20 10:37:32 | 000,000,162 | -H-- | C] () -- C:\Documents and Settings\moskva\Dokumenty\~$solvencni_rizeni_by_a94.doc
[2010.07.02 16:15:52 | 000,029,184 | ---- | C] () -- C:\Documents and Settings\moskva\Dokumenty\k nahrání.doc
[2010.06.20 18:59:27 | 000,001,604 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\QuickTime Player.lnk
[2010.06.20 18:26:50 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010.06.20 18:26:35 | 000,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml
[2010.06.20 18:26:33 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010.06.20 18:26:33 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010.06.20 18:26:32 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2010.06.20 18:26:31 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010.06.20 17:58:30 | 034,323,734 | ---- | C] () -- C:\Documents and Settings\moskva\Plocha\prstíčky.MOV
[2010.06.20 17:58:22 | 052,736,980 | ---- | C] () -- C:\Documents and Settings\moskva\Plocha\na lehátku.MOV
[2010.06.19 16:34:01 | 000,141,824 | ---- | C] () -- C:\Documents and Settings\moskva\Dokumenty\insolvencni_rizeni_by_a94.doc
[2010.06.19 14:26:38 | 000,139,776 | ---- | C] () -- C:\Documents and Settings\moskva\Dokumenty\Semestrální práce - Insolvenční řízení.doc
[2010.06.15 10:55:29 | 000,007,084 | ---- | C] () -- C:\Documents and Settings\moskva\Dokumenty\logo vsp.JPG
[2010.06.15 10:05:02 | 000,692,603 | ---- | C] () -- C:\Documents and Settings\moskva\Dokumenty\TQM_noPW.pdf
[2010.06.10 18:59:11 | 000,019,456 | ---- | C] () -- C:\Documents and Settings\moskva\Dokumenty\nemcina.doc
[2010.05.19 12:12:41 | 000,000,349 | ---- | C] () -- C:\WINDOWS\VFO.VST
[2010.05.19 11:57:26 | 000,001,050 | ---- | C] () -- C:\WINDOWS\VFO.INI
[2010.05.19 11:54:44 | 000,000,349 | ---- | C] () -- C:\Documents and Settings\All Users\Dokumenty\PCLECHAL.INI
[2010.03.28 13:07:26 | 000,000,400 | ---- | C] () -- C:\WINDOWS\T602.INI
[2009.10.27 15:51:22 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009.10.15 19:47:31 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2005.10.14 12:56:50 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll
[2005.10.14 12:56:50 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2005.10.14 12:56:50 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2005.10.14 12:56:50 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[1999.01.22 21:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL

========== LOP Check ==========

[2010.04.20 20:36:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2010.04.20 20:32:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\avg9
[2010.01.26 21:07:54 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonBJ
[2009.09.22 13:03:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2010.05.19 11:54:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
[2009.10.27 22:11:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Win7codecs
[2010.07.21 10:34:46 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{65893B95-F47B-4483-B883-86BA181E9B54}
[2010.05.19 19:31:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\moskva\Data aplikací\Audacity
[2010.02.11 12:03:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\moskva\Data aplikací\Canon
[2010.06.25 16:33:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\moskva\Data aplikací\Dealio
[2009.11.07 17:54:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\moskva\Data aplikací\DonationCoder
[2010.05.28 15:02:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\moskva\Data aplikací\ICQ
[2010.05.17 12:25:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\moskva\Data aplikací\Longfine Software
[2010.05.17 13:17:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\moskva\Data aplikací\Toolbar4

========== Purity Check ==========

========== Custom Scans ==========

dehydrovaný kocůr

Teda po odeslání toho logu jsem zjistil, že část pod "========== Custom Scans ==========" je velmi podobná zdrojovému kódu www stránky, nejsem si zcela jistý, jestli je tato část logu vůbec k něčemu dobrá, proto jsem jí tady neuvedl.
Kdyby to bylo přeci jen k něčemu důležité, tak ty údaje doplním.

Prosím o kontrolu logu Vyřešeno

Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Kdo je online